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Identification Card and Identification Method 



This invention relates to an identification card and an identification method. 
The invention relates particularly, but not exclusively, to a chip card to identify 
subscribers in an electronic data processing system or in a telecommunications 
system. 

Numerous systems require identification of users (called subscribers here) 
in order, for example, to access protected data, to order services or products, to 
make transactions or to gain access to protected zones. Computer networks, 
mobile radio networks, pay TV systems, access control devices, point-of-sale 
(POS) terminals, data bases, etc., can be mentioned as examples of such 
systems. 

A well-known method to identify subscribers uses a public alphanumerical 
identification and a secret password which every subscriber is asked to give. This 
often employed method is slow and tedious for the subscriber, who has to type in 
a lot of symbols manually to identify himself. Moreover this method does not offer 
a high degree of security since passwords, as is well known, can be observed or 
found out. 

A more secure method requires subscribers to show an object which is 
difficult to copy, such as, for example, a key or a chipcard, to identify themselves. 
An object Is of course harder to steal than a password, and its disappearance is 
usually noticed quickly so that access to the system can be blocked immediately. 
Often a password is also required in addition to the key or the chipcard. 

An identification chipcard usually contains identification parameters, which 
are usually written in a protected memory area of the chipcard during the person- 
alization of the chipcard. The personalization of the card takes place usually at 
the service provider, for example, a branch of a bank in the case of an automatic 
teller card. It is therefore not possible, generally speaking, to supplement the 
identification parameters or to change them without replacing the card or at least 
without bringing the card to the service provider. 

Since the number of systems requiring an identification of the subscriber 
continues to grow, subscribers are forced to possess more and more identification 
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cards to identify tliemselves, for example, at automatic teller machines, at 
access control installations or in various telecommunications systems. Most 
cards require moreover a different password from the user. This identification 
method is therefore not practical, and requires users to remember many 
5 different passwords. 

Proposed in the patent application WO 96/38814 is a chip card having 
an interface with a contact and an interface without a contact, which card has 
different memory areas for coupling via these different interfaces so that the 
card can carry out different functions, for example the function of a telephone 
10 value card and the function of a ticket. 

Proposed in the patent application EP 786 915 A2 is a SIM (Subscriber 
Identification Module) card in which identical identification numbers are stored 
several times in order to identify the respective subscriber in several mobile 
networks. 

15 Described in the patent application WO 94/30023 is a method of loading 

data and/or applications onto a SIM card via an air interface so that the card is 
provided with additional services and can be used as a multi-service card. 

One object of the present invention is to propose improved identification 
cards, identification methods and identification systems. 

20 According to the present invention, these objects are attained in 

particular through the features of the characterizing part of the independent 
claims. Further preferred embodiments follow, moreover, from the dependent 
claims and from the specification. 

In particular, these objects are attained through a SIM (Subscriber 

25 Identity Module) chipcard, for example by means of a SIM chipcard as defined 
in the tech-nical specification GSM 11.11 or GSM 11.14, which has been 
available since 1995, or respectively 1996, from the Secretariat of the Euro- 
pean Telecommunications Standards Institute, F-06921 Sophia Antipolis 
AMENDED PAGE 
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(France). 

SIM cards are used in mobile radio networks, such as, for example, in 
the GSM (Global System for Mobile Communications) network to store the 
Identity of the subscribers. Entailed is a removable chipcard, so the user can 
5 receive the calls intended for him on the mobile device of his choice by 
transferring the SIM card from one device to another. The mobile stations 
(MS), such as, for example, GSM cellular telephones, are therefore made up of 
two elements, the mobile device and the SIM chipcard. 

SIM cards exist today in two standard formats. The full-size format 
10 corre-sponds to the size of a credit card, whereas the plug-in format, which is 
adapted especially to the miniaturized, mobile telephones, is approximately 25 
mm by 1 0 mm. The functions of the cards in these two formats are identical. 

The SIM cards generally contain data processing means, usually a 
micro-controller integrated into a chip. This microcontroller contains a memory 
15 area, usually an EEPROM, which allows programs and/or data files to be 
stored, as well as processing means which are able to execute various 
algorithms, in particular algorithms which allow subscriber identification and 
communication encryption to be carried out. 
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The processing means have access to programs and to data files in the 
memory area of the card. These files comprise in particular a subscriber iden- 
tification IMS! (International Mobile Subscriber Identity), which is stored in a file 
EFIMSI on the card, and which identifies the subscriber in a GSM mobile tele- 
5 phone network. 

According to the invention, the SIM card comprises one or more additional 
new data files in the microcontroller's memory area, which contain identification 
parameters to identify the subscribers to other systems in these other systems. 

With these additional identification parameters the SIM chipcard can be 
10 used not only to identify the subscriber in another mobile radio network, but also 
to identify him in various other systems. 

According to another aspect of the invention, these additional identification 
parameters are communicated from a server connected to an SIM server to the 
SIM card of the subscriber. 
15 It is definitely possible to add identification parameters for new systems at 

any time in order to extend the application possibilities of already distributed SIM 
cards. The identification parameters for any system and in any already distributed 
SIM card can also be supplemented or changed remotely at any time. 

The present invention will be better understood with the aid of the following 
20 description, which is given as an example and is illustrated by these figures: 

Figure 1 is a block diagram showing a system according to the invention. 

Figures 2a and 2b show two different parameter tables in the SIM card, 
based on two different organization variants. 

Figure 3 is a block diagram of a variant of the invention in which the ter- 
25 minal device of the subscriber is a mobile computer, which can be connected to 
different systems. 

Figure 4 is a block diagram of another variant of the invention in which the 
terminal device of the subscriber is a mobile telephone which can be connected to 
different systems. 

30 The system shown in Figure 1 comprises a SIM chipcard 1, as is already 

being used in, among other things, GSM (Global System for Mobile Com- 
AMENDED PAGE 
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munications), DECT (Digital European Cordless Telephone System), DCS (Digital 
Cordless System) or PCS mobile devices, or also In future fixed networks with 
subscriber identification through chipcards. The SIM card can be either a full-size 
card or a plug-in card. By means of a contact area 1 1 on the surface of the card, 

5 it can be connected to a terminal (not shown), for example a mobile telephone, a 
PC, a laptop or a palmtop. The card contains data processing means 10, for 
example a microcontroller integrated into a chip. 

A memory area, preferably an EEPROM, is contained in the microcontroller 
10 or is connected thereto. The memory area contains programs and data files, 

10 which are arranged in a hierarchical directory structure. The data files comprise, 
among other things, elementary files (EF), such as are defined in the above- 
mentioned technical specification GSM 11.11 or GSM 11.14. 

According to the invention, the SIM card 1 contains in addition one or more 
new tables 101 and 102 in the memory area of the microcontroller 10. These 

15 additional tables contain identification parameters in order to identify the sub- 
scriber in other systems. The tables, which will be described more closely later 
with reference to Figure 2, can be contained in one or more elementary files EF in 
the memory area of the chipcard 1 . The other systems could be, for example, a 
mobile network, a fixed network or a WWW network, a computer network (NO, 

20 network computer), such as, for example, an internet, an intranet or an extranet, a 
pay TV system, a pay radio system, a traffic routing system (GPS, TPS), a bank, a 
point-of-sale (POS) terminal, etc. Depending upon the identification parameters 
in the tables, the subscriber can be identified in all these systems using a single 
card 1. 

25 The memory area of the microcontroller 10 comprises moreover one or 

more new EXE data files (program) to administer these additional identification 
parameters. The memory area preferably contains new software modules in order 
to access the identification parameters in the received SMS short messages and 
to store these received identification parameters. 

30 The SMS card preferably further contains an induction coil 12, in order to 

be able to communicate in a contactless way with external devices. The SIM 
microcontroller in this case will be preferably supplemented by another electronic 
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module (not shown), which is connected to the coil 12 and which is responsible for 
the contactless communication with an external device. 

The SIM card preferably contains in addition known means to transmit and 
receive SMS short messages, as well as known filter means to recognize and 
5 interim store special short messages, preferably according to the SICAP (SIM 
CARD Application Platform) method, which is described in the patent EP 0 689 
368 B1 , among others. Encryption and signing means are provided moreover in 
order to decrypt the received SMS messages and to encrypt and sign the trans- 
mitted SMS messages. As an encryption method, the TTP (Trusted Third Party) 

10 method can be used, for example, or an encryption method which works accord- 
ing to a point-to-point process. 

The SIM card 1 is connected to a mobile radio network, for example a GSM 
network, when inserted into a mobile device (not shown). A SIM server 3 for 
administration of short messages (SSC, Short Message Service Center) is 

15 likewise connected to the network 2. The SIM server 3 is equipped in such a way 
that it can communicate with the SIM card 1 over the mobile radio network by 
means of special SMS short messages. The known filter means in the SIM server 
and in the SIM cards enable special services, such as the exchange of data, in- 
structions and programs between the SIM server and an SIM card to be per- 

20 formed. 

A TTP server 4 is also connected to the SIM server 3 in order to encrypt at 
least certain special SMS short messages and thereby ensure that the confiden- 
tiality, authenticity of identity and authenticity of information, integrity and indisput- 
ableness of origin are guaranteed. As already mentioned, a point-to-point encryp- 

25 tion and signing can also be used. 

Various service providers 7 are connected to the SIM server 3 through the 
mobile radio network 2 or through a special network 6. The special network 6 can 
be, for example, an internet, intranet or extranet, or also a X25 network. The 
service providers administer the mentioned other systems 8. 

30 In order to identify himself to a service provider 7 and in order to use the 

system offered by this provider, the subscriber must identify himself beforehand 
with the identification parameters available in his chipcard, for example with a 
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password stored in the card 10. According to the invention, identification 
parameters for various systems are stored in the memory area of a single SIM 
card 1 . Different systems can access the required identification parameters 
through a kind of virtual bus in the SIM card 1 . The service provider puts, for this 
5 purpose, the necessary parameters in a table 5 to v\/hich the SIM server 3 has 
access. The parameter table is preferably stored in the SIM server 3. It contains 
the parameters for each subscriber and for each system 8. 

The SIM server 3 carries out the data management between the service 
provider 7, the table 5 and the SIMs 1. The communication takes place en- 
3 crypted. Via SIM server 3, each service provider 7 has access to a memory area 
101, 102, of the SIM cards 1 subscribing to the system 8 of that service provider; 
in this memory area he can put the necessary parameters for use of his system. 
These parameters are communicated by the SIM server 3 and by means of 
special SMS short messages. 
' The SIM server 3 draws up and manages the parameter table 5. The 

parameter table 5 contains a copy of ail identification parameters communicated 
to the subscribers. 

Figure 2 shows two different possibilities of storing identification param- 
eters in the memory area of the SIM card 1 0. These parameters can be stored, 
for example, in different tables 101, as is indicated diagrammatically in Figure 2a. 
A table corresponds then to a service or system, to which the subscriber has 
subscribed. A table can then contain, for example, the parameters which allow 
the card to be used as an identifying SIM card in a GSM network, whereas a 
second table contains the identification parameters for a computer network, and a 
third contains the identification parameters for a pay TV system, etc. These 
different tables can be stored in a single EF data file, or preferably each table in a 
different data file. In the latter case a new data file must be created each time a 
subscriber subscribes to a new system. 

It is also possible, however, to store identification parameters for different 
systems in a single table 102, as shown diagrammatically in Figure 2b. This table 
102 then contains a first area 1020, which indicates the common parameters x, y, 
z for each system - for example, the name of the subscriber. Other areas 1 021 , 



1022, 1023, etc. contain, on the other hand, the parameters a, b,..., f... specific to 
each system subscribed to. For example, the area 1021 gives the identification 
parameters IMSI (International Mobile Subscriber Identity) and MSISDN (Mobile 
Station Identity Number), with which the subscriber to a GSM network can be 
i identified, and the area 1 022 contains parameters to identify him in a MNC 
network, etc. 

The SIM card 1 parameterized in this way can be used in different systems 
in that, for example, it is inserted directly into a card reader of that system - for 
example into an automatic teller machine in the case of a banking system. The 
card reader can then access the required identification parameters through the 
contact area 1 1 on the card. The card reader can, for example, have direct 
access to the respective memory area 1022, 1023, etc. 

In a preferred variant, however, the systems 8 can access the identification 
parameters a, b, ... only through the data processing means 10 in the card. Pre- 
ferably in this case each system is ensured access to the parameters as if the 
individual systems were isolated (virtual bus). 

Certain systems require the identification parameters to be introduced ac- 
cording to a predefined protocol. For example, the card reader during subscriber 
identification often makes a number of inquiries to the chlpcard, which the card 
must respond to in accordance with the respective identification parameters. This 
protocol can be executed by the processor on the card, which is specially pro- 
gramed for this purpose with a specific program in the memory area of the card. 

If a system requires of the card that it executes a system-specific, other- 
wise not available identification protocol, it is possible, according to the invention, 
for the EXE file needed to carry out this protocol to be communicated to the card.' 
This program is preferably communicated by means of special SMS short mes- 
sages through the network 2, in the same way as normal identification param- 
eters. As soon as the SIM card has recognized that it is located in a card reader 
which requires such an identification protocol, then it executes the respective 
program immediately. The SIM card then acts as a normal identification card of 
this system. The protocol program is preferably programmed in the JAVA 
language. 
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The identification parameters can contain, for example, a public 
identification (name, country, iD, etc.) and a secret password of the subscriber. 
It is however also possible to store any other parameter, depending upon the 
subschbed-to system. For example, biometric parameters can also be stored, 
5 such as, for example, voice parameters, facial features or retinal patterns of the 
subscriber. The parameter tables 101, 102 can also contain, however, all other 
parameters or data used for the identification protocol. 

Figure 3 is a block diagram of a variant of the invention, in which the ter- 
minal device of the subscriber is a mobile computer 13, which can be 

10 connected to different systems 8. The mobile computer 13 comprises a 
chipcard reader in order to be able to read in particular SIM chipcards 1. 
Various applications in the computer 13 enable it to be connected to different 
systems, for example to a computer network, to an internet, to an intranet, or to 
an extranet, or to a pay TV network. These application programs, with which 

15 the computer can be connected to the various external systems, can all be 
executed by this computer and, in a multi-tasking operating system, for 
example, can be shown at the same time in a plurality of windows 130, 131 , 
132, 133 on the screen of the mobile computer. The connection to these 
different systems is achieved with suitable connection means D, E, for example 

20 with the aid of a modem and/or a network adapter. 

The mobile computer 13 comprises moreover means to connect it to a 
mobile radio network 2, these means being integrated into the computer 13 or 
being located outside this computer. In this way the service providers 7 of the 
various systems 8 can communicate identification parameters and identification 

25 protocoi programs in the SIM cards 1 of their subscribers through a network 6 
and a SIM server 3, as described above. These identification parameters are 
more-over copied in the table 5, to which the SIM server 3 has access. The 
various messages A, B, C between the service providers, the SIM server 3 and 
AMENDED PAGE 
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the terminal 1 are preferably encrypted and signed by mean of TTP, as 
described above. 

The subscriber equipped with the mobile computer 13 can use various 
applications to the different systems 8, the connection requiring the reading of 
5 corresponding identification parameters on the SIM card 1, and, should the 
situation arise, execution of an identification protocol program stored on the 
card 1 , as described above. 

Figure 4 is a block diagram of a variant of the Invention in which the 
terminal device of the subscriber is a mobile telephone 14, which can be 

10 connected directly to various systems 8 through different interfaces 12, 140. 
These additional interfaces comprise, for example, an induction coil 12 in the 
SIM card 1, with which the SIM card 1 can communicate in a contactless way 
with an external system 8. For this purpose, the system 8 is also connected to 
an inductive transmitter-receiver 80. The mobile device 14 can also 

15 communicate through an optional infrared transmitter-receiver 140 in a 

contactless way with a transmitter receiver 81 connected to a system 8. Other 
means to connect the mobile telephone 14 to other systems can also be used 
within the framework of the invention. For example, the mobile telephone can 
be connected to external systems through the normal mobile radio network 2 or 

20 by means of a connector. 

The service providers 7 of the various systems 8 connected to the SIM 
server 3 through a network (not shown) can subsequently load identification 
parameters and possibly identification protocol programs Into the SIM cards of 
their subscribers through the SIM server 3, as described above. These identifi- 

25 cation parameters are moreover copied into the table 5, to which the server 3 
has access. The various messages A, B, C between the service providers, the 
AMENDED PAGE 



9a 

SIM server 3 and the mobile device 14 are preferably encrypted by means of 
TTP. 

With the identification parameters stored in the mobile device 14, the 
subscriber can identify himself in the various systems 8 in order to use these 
5 systems. 

Advantageous with this invention is that the various service providers 7 
can control the services they offer as needed. Since, for administration of 
parameters, there exists only one interface to the SIM cards 1, mechanisms for 
billing of all the networked systems can easily be set up. 
10 In an embodiment vanant, the identification card 1 comprises several 

contact areas in order to connect it to various systems 8. 
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Claims 

1 . Identification card (1 ) for a subscriber to a mobile radio network (2) 
which comprises a contact area (1 1 ) in order to connect it to a mobile device 
(13, 14), and electronic memory means (10) which contain the identification 
5 parameters of the subscriber to the said mobile radio network, 

characterized in that one or more other identification parameters are 
stored in the said memory means for the identification of the subscriber in at 
least one other system, at least one said other system not being a mobile radio 
network. 

10 2. Identification card according to the preceding claim, characterized in 

that the said other identification parameters are stored in a single table (102) in 
the said memory means (10). 

3. Identification card according to claim 1 , characterized in that the said 
other identification parameters are stored in different tables (101) in the said 

15 memory means (10). 

4. Identification card according to claim 1 , characterized in that the said 
other identification parameters are accessible through the said contact area 
(11). 

5. Identification card according to claim 1 , characterized in that it 

20 comprises a plurality of contact areas in order to connect it to different systems 
(8). 

6. Identification card according to claim 1 , characterized in that it further 
contains an induction coil (12) through which it is possible to access the said 
other identification parameters. 

25 7. Identification card according to one of the preceding claims, 

characterized in that it is so equipped that it can communicate with a SIM 
server (3) in the said mobile radio network (2) through SMS messages, and in 
that it comprises means to access the said identification parameters in the said 
SMS messages as well as means to store these identification parameters in the 
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said memory means (10). 

8. Identification card according to the preceding claim, characterized in 
that it further comprises decryption means for the said short messages. 

9. Identification card according to the preceding claim, characterized in 
5 that the said decryption means work according to the TTP method. 

10. Identification card according to claim 8, characterized in that the 
said decryption means work according to a point-to-point method. 

1 1 . Identification card according to one of the preceding claims, 
characterized in that at least one said other system is a computer network, and 

10 in that the said other identification parameters permit an identification in this 
computer network. 

12. Identification card according to one of the preceding claims, 
characterized in that at least one said other system is a pay TV system, and in 
that the said other identification parameters permit an identification in this pay 

15 TV system. 

1 3. Identification card according to one of the preceding claims, 
characterized in that at least one said other system is a fixed network, and in 
that said other identification parameters permit an identification In this fixed 
network. 

20 14. Identification card according to one of the preceding claims, 

characterized in that the said other identification parameters permit an 
identification at a financial institution. 

1 5. Identification card according to one of the preceding claims, 
characterized in that at least one said other system is a traffic routing system, 

25 and in that the said other identification parameters permit an Identification in 
this traffic routing system. 

16. Identification card according to one of the preceding claims, 
characterized in that It is a GSM-SIM card. 
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1 7. Identification card according to one of the preceding claims, 
characterized in that the said identification parameters also contain biometric 
identification parameters. 

1 8. Identification card according to one of the preceding claims, 
characterized in that in addition one or more other system-dependent 
identification protocols are contained in the said memory means, which are 
executed by data processing means in the identification card in order to identify 
the subscriber in the said other systems. 

19. Mobile radio system comprising: 

a SIM server (3) 

a multiplicity of mobile devices (13, 14), which can be connected 
to said SIM server through a mobile radio network (2), at least certain mobile 
devices containing an identification card (1), the identification cards containing 
a contact area in order to connect them to the respective mobile device (13, 
14), and electronic memory means (10), in which identification parameters of 
subscribers to the said mobile radio network are stored, 

characterized in that one or more other identification parameters are 
stored in the said memory means for identification of the subscriber in at least 
one other system, at least one said other system not being a mobile radio 
network. 

20. Mobile radio system according to the preceding claim, characterized 
in that the said other identification parameters are stored in one or more tables 
(5), which are accessible to the said SIM server (3), and can be transferred into 
said memory means (10) from the said tables. 

21. Mobile radio system according to the preceding claim, characterized 
in that the said other parameters are stored in the said memory means (10) in a 
single table (102). 

22. Mobile radio system according to claim 19, characterized in that the 
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said other identification parameters are stored in the said memory means (10) 
in different tables (101). 

23. Mobile radio system according to claim 19, characterized in that the 
said other identification parameters are accessible through the said contact 

5 area (1 1 ) if the card is inserted in a device connected to said other system. 

24. Mobile radio system according to claim 19, characterized in that at 
least certain identification cards contain a plurality of contact areas in order to 
connect them to various systems (8). 

25. Mobile radio system according to claim 1 9, characterized in that at 
10 least certain SIM cards contain in addition an induction coil (12) through which 

the said other identification parameters can be accessed. 

26. Mobile radio system according to claim 19, charactenzed in that at 
least certain mobile devices comprise an infrared interface (140) in order to be 
able to communicate identification parameters to external systems (81 , 8). 

15 27. Mobile radio system according to claim 19, characterized in that the 

said multiplicity of mobile devices (13, 14) is set up in such a v^^ay that it can 
communicate with the said SIM server through SMS messages, and in that the 
identification parameters stored in the said SMS messages are accessible for 
storing in the said memory means (10). 

20 28. Mobile radio system according to one of the claims 19 to 27, 

characterized in that the said identification parameters contain biometric 
identification parameters. 

29. Mobile radio system according to one of the claims 19 to 28, 
characterized in that in addition one or more other system-dependent 

25 identification protocols are contained in the said memory means, which are 
executed by data processing means in the identification card in order to identify 
subscribers in other systems. 

30. Method to identify a mobile telephone subscriber in other systems, 
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characterized by the following steps: 

storing of identification parameters in a server (3, 7), with which the said 
subscriber can be identified in the said other system or systems (8), at least 
one said other system not being a mobile radio network; 
5 communication of said identification parameters from the said server to 

the identification cards (1 ) of the respective subscriber via a mobile radio 
network (2), the said identification cards (1) being connected through a contact 
area (11 ) to the mobile device (13, 14), and the cards having electronic 
memory means (10), which contain identification parameters of subscribers to 
10 the said mobile radio network; 

storing of the said communicated identification parameters of the 
respective subscriber in the said memory means (10); 

use of the said identification cards as identification means in the said other 
systems. 

15 31 . Method according to the preceding claim, characterized in that the 

said communicated identification parameters are encrypted. 

32. Method according to claim 30, characterized in that the said other 
identification parameters can be accessed through the said contact area (11). 

33. Method according to claim 30, characterized in that the said other 
20 identification parameters can be accessed through an induction coil (12) in the 

said identification cards. 

34. Method according to claim 30, characterized in that the said other 
identification parameters can be accessed through an infrared interface (140) 
in the mobile devices (13, 14). 
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20005-391 8, telephone number (202) 861-3000 (to whom all communications are to be directed), and the below-named persons (of the same address) individually 
and collectively my attorneys to prosecute this application and to transact all business in the Patent and Xrademark Office connected therewith and with the resulting 
patent, and 1 hereby authorize them to delete names/numbers below of persons no longer with their firm and to act and rely on instructions from and communicate 
directly with the person/assignee/attomey/firm/ organization who/which first sends/sent this case to them and by whom/which I hereby declare that I have consented 
after full disclosure to be represented unless/until I instruct the above Firm and/or a below attorney in writing to the contrary. 
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